Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.mft
File: gHcJ57DvuhJwJcg-XTGUxxukKMM.mft (raw, json)
Hash identifier: 7ckCQKYO6FNpKLE4aFDWEJbEbfP2uzWOQZtTZz8pD8c=
Subject key identifier: 60:9B:95:9B:54:52:5C:8F:DF:24:D0:1E:F3:63:99:7C:80:C9:7D:9D
Authority key identifier: 80:77:09:E7:B0:EF:BA:12:70:25:C8:3E:5D:31:94:C7:1B:A4:28:C3
Certificate issuer: /CN=807709e7b0efba127025c83e5d3194c71ba428c3
Certificate serial: 019DB27D970F2F3216644FE2E4D6759E1454
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gHcJ57DvuhJwJcg-XTGUxxukKMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.mft
Manifest number: 18D6
Signing time: Wed 22 Apr 2026 00:01:08 +0000
Manifest this update: Wed 22 Apr 2026 00:01:08 +0000
Manifest next update: Thu 23 Apr 2026 00:01:08 +0000
Files and hashes: 1: 17V0jzStQoCb_AQ6tvGaBLavGoM.roa (hash: xin2ArbEF/v8y8IFPHvAh0sLnYeJkUxdnoEAhdH3Knc=)
2: P3hxeobOBa_A0xJ0xlGfKnSdNVU.roa (hash: mHchc2zREYZlnOuz8p+co3qUvhS0H4UpE0PWUACDroc=)
3: fn22VffPk13JEZ43P7QzWAHfKUI.roa (hash: jLIrzazW1c/8A69YDLVF5OeAhGmqg599WqHWOZ8LrQc=)
4: gHcJ57DvuhJwJcg-XTGUxxukKMM.crl (hash: tPFuqNZjfZ4n8b9sG+jvEQoTnWOjDohrNiJxFULwN0s=)
5: lvjXs-MIPCkpvks5PHkIN5Ickrg.roa (hash: rbC/bc1gnAJSprju+NYQ5fdLrBRf1LuhW2461H5788Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gHcJ57DvuhJwJcg-XTGUxxukKMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 21:56:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b2:7d:97:0f:2f:32:16:64:4f:e2:e4:d6:75:9e:14:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=807709e7b0efba127025c83e5d3194c71ba428c3
Validity
Not Before: Apr 22 00:01:08 2026 GMT
Not After : Apr 23 00:01:08 2026 GMT
Subject: CN=609b959b54525c8fdf24d01ef363997c80c97d9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9e:b6:db:ff:a0:b1:31:fd:1b:a6:8a:85:70:
27:a9:f4:43:a4:c0:f3:7e:27:c0:67:6b:fc:0d:15:
89:a1:09:07:e6:73:b8:33:31:01:ca:e7:dd:85:7f:
ac:c6:69:49:f5:1e:8a:8a:e9:6c:68:70:00:8a:86:
b9:40:00:27:a3:4b:8f:67:e3:9e:05:dc:c1:c0:cf:
93:d1:12:96:62:be:06:9f:e0:2a:0f:bf:8d:08:83:
d2:90:e8:6e:8e:e8:40:14:20:0f:cf:0e:cd:ad:a0:
f7:f8:2d:80:8d:54:64:6b:36:43:c3:b2:fa:c0:b0:
cc:1d:77:28:1c:36:34:1e:1a:57:b2:24:86:8e:22:
ff:cb:b0:d0:8b:8f:8f:d1:fd:75:62:61:46:70:c6:
2c:3f:55:2f:80:46:f7:82:26:b1:da:f8:e0:90:06:
60:d1:ed:30:c8:1c:c3:57:64:31:e9:18:37:c9:fa:
12:69:c3:66:30:b4:52:57:3d:63:c7:df:fa:e8:f2:
00:aa:5c:18:c6:e6:96:45:e1:c9:de:f4:ca:83:bf:
88:7b:ca:b7:2c:c7:c2:96:36:f5:a2:e6:eb:96:d2:
62:cb:ae:44:a5:39:bf:f1:f7:12:a4:12:2e:38:54:
b3:c8:90:7e:5f:da:84:ac:05:63:9d:0e:46:d3:ca:
43:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:9B:95:9B:54:52:5C:8F:DF:24:D0:1E:F3:63:99:7C:80:C9:7D:9D
X509v3 Authority Key Identifier:
keyid:80:77:09:E7:B0:EF:BA:12:70:25:C8:3E:5D:31:94:C7:1B:A4:28:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gHcJ57DvuhJwJcg-XTGUxxukKMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:c2:cf:c8:dc:50:1f:3a:e6:32:83:e4:8d:97:5e:7c:9f:5b:
1a:9e:40:b9:cd:3f:ca:82:be:53:fc:8f:34:0c:72:1d:f6:6c:
74:00:f1:65:56:a4:22:84:d3:54:33:96:36:d2:79:0c:9c:e5:
d2:e5:d4:18:49:a2:fc:4b:cb:85:14:d6:e4:fa:d6:e1:bd:f4:
8f:78:51:4a:e9:62:84:ec:86:aa:c9:31:e1:23:76:1f:8f:c7:
98:19:57:ca:14:d1:bd:2e:5c:c9:f5:a8:25:45:37:af:c9:40:
07:14:cd:dd:ef:1d:d6:b8:99:d2:d9:34:d7:ed:e1:be:5a:80:
12:79:9a:de:e9:1e:30:fc:76:b4:9e:f0:5e:37:8b:cf:b8:63:
ad:35:82:ca:78:ec:2c:75:88:3e:74:c0:11:49:f5:bd:23:3a:
18:2b:ec:25:e7:2b:1f:f0:be:47:89:2c:02:f1:bd:e7:20:70:
a9:7b:e6:44:cd:ce:d9:2e:4a:86:b4:d4:ed:fb:50:ea:87:cd:
8a:7e:6c:16:34:29:a4:d9:93:70:3c:fe:e0:9f:29:ab:3b:36:
4c:75:67:1f:9f:13:60:8f:0b:84:37:57:c6:fb:07:b6:5e:7c:
f5:a9:e8:40:0b:e7:ee:f3:39:38:6f:1b:95:bf:65:f1:05:62:
b1:0a:65:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 05:22:37 2026 by rpki-client